$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/33e03416-ae68-373e-81a6-1fa5c9d93881.roa File: 33e03416-ae68-373e-81a6-1fa5c9d93881.roa (raw, json) Hash identifier: kW/eDTjUeL7XqUe0EqFsT6g6oS/WsKNGmSGKRkED2gs= Subject key identifier: 71:C4:A9:06:77:E6:F3:7D:2E:47:A6:AF:30:36:F1:35:73:31:31:03 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A103532AD3F3C5F506B733300 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/33e03416-ae68-373e-81a6-1fa5c9d93881.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 61986 IP address blocks: 2001:470:427::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:32:ad:3f:3c:5f:50:6b:73:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=3f2027d6-4344-4e0f-a359-1391fb69c401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:df:70:16:51:37:21:9b:c8:ad:4f:34:38:95: b1:c6:1b:45:7e:f1:aa:98:0a:55:af:f4:d4:d7:ac: c9:ce:b8:cc:b7:2c:70:1b:2a:52:c3:9e:46:4b:4c: 77:6e:41:14:02:cb:ef:27:f1:6f:ef:01:2e:54:c5: 24:29:f5:a8:83:cc:22:43:84:97:c1:ad:ba:5a:bc: 61:e6:ae:3c:f1:cb:4a:55:23:54:14:39:da:4a:66: 5b:9b:21:74:31:2b:b1:a8:bc:c4:1f:76:e8:95:ea: 39:69:15:71:8f:4a:9a:5a:fa:ad:cf:38:7f:62:01: 91:37:a0:bc:cd:ce:65:fc:c1:71:85:10:8c:42:97: 66:a3:31:e4:7f:b4:be:d6:93:25:79:ad:cb:f9:40: f9:43:30:fd:f0:c6:4d:c9:19:d8:cb:54:0d:7e:d3: 0a:2b:3d:b1:85:16:d2:16:8e:02:e3:74:92:b6:dd: 32:74:62:64:02:a4:5f:72:30:e1:1c:07:1b:38:8b: 02:a9:d5:20:26:d9:eb:d2:7e:90:94:8d:03:54:2c: 7a:09:c3:95:fd:f9:ba:0e:35:19:d4:62:e6:ce:97: 7d:e9:a9:6f:b7:14:10:4f:ea:cc:da:c2:5b:91:63: 50:c4:ad:19:26:b8:91:ac:81:b4:6b:f2:02:b5:79: 4c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:C4:A9:06:77:E6:F3:7D:2E:47:A6:AF:30:36:F1:35:73:31:31:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/33e03416-ae68-373e-81a6-1fa5c9d93881.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:427::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:4e:9c:31:52:1b:af:c4:e9:a5:af:74:f7:73:68:cc:c1:9e: c4:de:a1:94:5d:9c:9b:62:86:5d:d6:b4:24:dd:9a:06:7d:e0: f9:8c:02:50:2b:e9:a0:cf:78:f4:ff:d8:30:9a:97:ee:b2:fe: 35:8b:da:04:bd:27:83:33:8e:8e:8c:e0:6e:fa:ac:2b:75:be: ac:3a:52:bc:62:fe:98:ba:f5:38:8b:a9:b1:4e:83:2e:a7:63: de:00:db:69:d1:8f:b7:0b:ec:4e:e2:e1:a3:2c:d3:1e:26:98: 5c:7e:b3:05:fb:91:3e:5e:a7:64:f7:cc:0b:95:e3:1e:6b:45: ed:92:3d:91:5c:f8:f0:76:a6:44:6b:e4:5a:47:d7:88:0b:db: cc:7a:88:0b:92:4b:68:e4:77:de:71:59:54:2b:7b:1a:fa:24: 33:ac:f0:7b:1c:f4:6d:d7:c7:6a:8e:8c:6c:d0:41:91:4a:f4: bf:89:88:e5:04:95:e9:07:54:f8:ad:11:4e:f4:c0:c4:8f:ac: 13:8b:5d:9e:34:0e:da:8a:15:eb:3e:4c:5f:eb:5c:2a:95:e1: 67:65:04:03:dc:4a:3c:c1:a6:cb:69:70:79:57:d0:b6:e8:05: 21:0d:91:da:7a:45:bf:fe:1e:da:3e:98:22:92:24:f6:a4:dc: 56:8a:eb:d0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoQNTKtPzxfUGtzMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk M2YyMDI3ZDYtNDM0NC00ZTBmLWEzNTktMTM5MWZiNjljNDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA499wFlE3IZvIrU80OJWxxhtFfvGqmApVr/TU 16zJzrjMtyxwGypSw55GS0x3bkEUAsvvJ/Fv7wEuVMUkKfWog8wiQ4SXwa26Wrxh 5q488ctKVSNUFDnaSmZbmyF0MSuxqLzEH3boleo5aRVxj0qaWvqtzzh/YgGRN6C8 zc5l/MFxhRCMQpdmozHkf7S+1pMlea3L+UD5QzD98MZNyRnYy1QNftMKKz2xhRbS Fo4C43SStt0ydGJkAqRfcjDhHAcbOIsCqdUgJtnr0n6QlI0DVCx6CcOV/fm6DjUZ 1GLmzpd96alvtxQQT+rM2sJbkWNQxK0ZJriRrIG0a/ICtXlMxwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHHEqQZ35vN9LkemrzA28TVzMTEDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzNlMDM0MTYtYWU2OC0z NzNlLTgxYTYtMWZhNWM5ZDkzODgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIhOnDFSG6/E6aWvdPdzaMzBnsTeoZRdnJtihl3WtCTdmgZ94PmM AlAr6aDPePT/2DCal+6y/jWL2gS9J4Mzjo6M4G76rCt1vqw6Urxi/pi69TiLqbFO gy6nY94A22nRj7cL7E7i4aMs0x4mmFx+swX7kT5ep2T3zAuV4x5rRe2SPZFc+PB2 pkRr5FpH14gL28x6iAuSS2jkd95xWVQrexr6JDOs8Hsc9G3Xx2qOjGzQQZFK9L+J iOUElekHVPitEU70wMSPrBOLXZ40DtqKFes+TF/rXCqV4WdlBAPcSjzBpstpcHlX 0LboBSENkdp6Rb/+Hto+mCKSJPak3FaK69A= -----END CERTIFICATE-----Generated at Sun Jun 8 18:29:42 2025 by rpki-client